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This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims 

Claims 1-14 (Canceled) 

Claim 15 (Previously presented): A session-state management method 
comprising: 

receiving a one-way encrypted, session-state token from a client, wherein 
the token incorporates a representation of session state of a client; 

generating a one-way encrypted^ confirmation session-state token; and 

comparing the confirmation token with the received token; 

wherein the generatmg step comprises fomoing a confirmation token that 
incorporates a representation of an incremental time block, if confirmation and 
received tokens fail to match; 

generating a new one-way encrypted, confirmation session-state token, 
wherein the confimiation token incorporates a representation of a previous 
incremental time block; and 

comparing the new confirmation token with the received token; 

wherein the new-confirmation-token generating step comprises fonning a 
confirmation token that incorporates a representation of an incremental time block, 
if confuination and received tokens fail to match, and 

repeating the steps of new-confinnation-token generating and comparing 
the new and received tokens, wherein each subsequent reiteration of such steps 
employs a representation of a previous incremental time block that is previous a 
previous reiteration of the same steps, for a specified number of times or until 
compared tokens match. 
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Claim 16 (Canceled) 

Claim 17 (Original): A session-state management method comprising: 

(A) receiving a one-way encrypted, session-state token from a client; 

(B) generating a one-way encrypted, confirmation session-state token, 
wherein the confirmation token incorporates a representation of a current 
incremental time block; 

(C) comparing the confirmation token with the received token; 

(D) if the confirmation token and the received token match, 

(1) issuing a one-way encrypted, replacement session-state token, wherein 
the replacement token incorporates a representation of a current incremental time 
block; 

(2) sending the replacement token to the client, 

if the confirmation token and the received token fail to match, 

(3) generating a new one-way encrypted, confirmation session-state token 
using the one-way encryption scheme of the encryption step, wherein the token 
incorporates a representation of a previous incremental time block; 

(4) comparing the new confirmation token with the received token; 

(5) if the new confirmation and received tokens fail to match, then further 
comprising: 

(i) repeating the steps of new-confirmation-token generating and comparing 
the new and received tokens, wherein each subsequent reiteration of such steps 
employs a representation of a previous incremental time block that is previous a 
previous reiteration of the same steps, for a specified number of times; 

(ii) if, during the repeating step, the confimiation token matches the 
received token. 
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(a) issuing a one-way encrypted, replacement session-state token, wherein 
the token incorporates a representation of a current incremental time block; 

(b) sending the replacement token to the client. 

Claim 18 (Original): A computer-readable storage medium having 
computer-executable instructions that, when executed by a computer, performs the 
method as recited in claim 17, 

Claims 19-35 (Canceled) 

Claim 36 (Previously presented): A session-state management method 
comprising: 

receiving a user-associatcd, encoded session-state token from a client, 
wherein the encoded token incorporates a representation of session-state of the 
user's session; 

generating an encoded, confirmation session-state token; 

comparing the received token with the confirmation token; 

wherein the generating step comprises forming a confirmation token that 
incorporates a representation of a current incremental time block, if confirmation 
and received tokens fail to match, further comprising: 

generating a new confirmation token using a representation of a incremental 
time block previous of the time block representation used for the previous 
genemting step; 

comparing the new confirmation token with the received token; and 

if confirmation and received tokens fail to match, and 

repeating the steps of generating a new confirmation token and comparing 
the new and received tokens, wherein each subsequent reiteration of these steps 
uses a representation of a previous incremental time block that is a previous 
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reiteration of the same steps^ for a specified number of times or until compared 
tokens match. 

Claim 37-50 (Canceled) 
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